Archive
27 August 2021
Vulnerabilities first published on this day (UTC), newest first.
32 results · Feed
-
High 8.8CVE-2021-39174 Public exploit
Configuration leak
Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various pas…
-
High 8.8
Forced reinstall
Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges (User or Admin), can trick Cachet and install the instance again, leading to arbitrary code execution on the server. This issue was address…
-
High 8.8
New line injection during configuration edition
Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can exploit a new line injection in the configuration edition feature (e.g. mail settings) and gain arbitrary code execut…
-
Medium 5.3
Unlimited transforms allowed for signed nodes
Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Prior to version 3.1.0, a malicious SAML payload can require transforms that consume significant system resources to process, thereby resulting in reduced or…
-
High 7.2
Data Flow Sanitation Issue Fix
OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in versions prior to 19.4.15 and 20.0.13, it was possible for admin users to upload arbitrary executable files to the server. OpenMage versions …
-
Unscored —
A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.
-
Unscored —
An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a w…
-
Unscored —
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned p…
-
Unscored —
Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in …
-
Unscored —
long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the …
-
Unscored —
inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant…
-
Medium 6.1
Mezzanine Cross Site Scripting (XSS) vulnerability
Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.
-
Critical 9.8
Command Injection in Simiki
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.
-
Medium 6.1
Cross Site Scripting (XSS) in Simiki
Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary code via line 54 of the component 'simiki/blob/master/simiki/generators.py'.
-
Unscored —
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admi…
-
Unscored —
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admi…
-
Unscored —
xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivilege…
-
Unscored —
SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.
-
High 7.2
Layout XML Arbitrary Code Fix
OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin users to execute arbitrary commands via block methods. The latest OpenMage Versions up from v19.4.15 and v20.0.11 have …
-
Medium 5.6
Prototype Pollution
This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components used in the path parameter are arrays. In particular, the condition currentPath === '__proto__' returns false if…
-
Unscored —
ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buff…
-
Unscored —
ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer wit…
-
Medium 5.4
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
High 8.0
XSS vulnerability using dialog
Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the web client built-in dialog to display a malicious string, leading to cross-site scripting (XSS). XSS could compromise the API request toke…
-
Unscored —
The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender …
-
High 7.5
In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS…
-
Unscored —
Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.p…
-
Unscored —
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by…